NVD

Id
52624  
Name
CVE-2007-0397  
Description
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-01-19  
Modified Date
2011-03-07  
Seq
2007-0397  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265860 52624 CVE-2007-0397 1017535  View
265861 52624 CVE-2007-0397 1017536  View
265862 52624 CVE-2007-0397 20070118 SSL/TLS Certificate and SSH Public Key Validation Vulnerability  View
265863 52624 CVE-2007-0397 22111  View
265864 52624 CVE-2007-0397 ADV-2007-0245  View
265865 52624 CVE-2007-0397 cisco-csmars-asdm-device-spoofing(31567)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52727 JVNDB-2007-001419 CS-MARS などにおける正確でない情報を生成される脆弱性 Cisco Security Monitoring (CS-MARS) および Adaptive Security Device Manager (ASDM) は、デバイスを接続している際、SSL/TLS 証明書または SSH 公開鍵 を検証しないため、デバイスになりすまされ重要な情報を取得される、または不正確な情報を生成される脆弱性が存在します。 CVE-2007-0397 23752 CVE-2007-0397 52624 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001419.html 2007-01-18 2012-06-26 View